Medium
CVE-2024-3489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-32801
Widget Post Slider <= 1.3.5. - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32956
RomethemeKit For Elementor <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32717
SchedulePress <= 5.0.8 - Missing Authorization
High
CVE-2024-32836
WP-Lister Lite for eBay <= 3.5.11 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2024-2798
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-32822
Reviews Plus <= 1.3.4 - Missing Authorization to Notice Dismissal
High
CVE-2024-32807
Sendinblue for WooCommerce <= 4.0.17 - Authenticated (Editor+) Arbitrary File Download and Deletion
Medium
CVE-2024-32947
WP ADA Compliance Check Basic – Most Comprehensive Web Accessibility Solution for WordPress <= 3.1.3 - Cross-Site Request Forgery
High
CVE-2024-32703
ARForms <= 6.4 - Missing Authorization to Arbitrary File Deletion
Medium
CVE-2024-32799
Easy Property Listings <= 3.5.3 - Missing Authorization via epl_update_listing_coordinates()
High
CVE-2024-3499
ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module
Medium
CVE-2024-32819
Culqi <= 3.0.14 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-3664
Quick Featured Images <= 13.7.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting
Critical
CVE-2024-32809
ActiveDEMAND <= 0.2.41 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-3732
GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode
Medium
CVE-2024-32827
Giveaways and Contests by RafflePress <= 1.12.7 - Unauthenticated IP Spoofing
Medium
CVE-2024-32814
Advanced Local Pickup for WooCommerce <= 1.6.1 - Missing Authorization to Notice Dismissal
Medium
CVE-2024-32806
Headline Analyzer <= 1.3.3 - Cross-Site Request Forgery
High
CVE-2024-32729
Conversational Forms for ChatBot <= 1.1.8 - Unauthenticated Arbitrary File Download
Medium
CVE-2024-32951
Max Addons Pro for Bricks <= 1.6.1 - Missing Authorization
Medium
CVE-2024-3239
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32725
5 Stars Rating Funnel <= 1.2.67 - Missing Authorization
Medium
CVE-2024-32784
CookieHub <= 1.1.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.